Cloning your website is another level in fix hacked wordpress database that can be very useful. Cloning simply means that you have backed up your site to a completely different place, (offline, as in a folder, so as to not have SEO problems) click here to find out more where you can get it in a moment's notice if the need arises.
A simple way is to use a few tools. To begin with, do not allow people to list the documents run a web host security scan and automatically backup your web hosting account.
It's a WordPress plugin. They're drop dead simple to install, have all the features you need for a task such as this, and are relatively inexpensive, especially when compared to having to employ someone to have this done for you.
Phrases that were whitelists and black based on which area they look inside. (unknown/numeric parameters vs. known post bodies, you could check here remark bodies, etc.).
Change admin username and your WordPress password, or at least your password and collect and utilize fantastic WordPress security tips to keep hackers out!